mod_http security issue (CVE-2026-119618)
-
Hi Cloudron team, any advice from your side about the CVE mod_http ? So far I can see under our apps, WP, Dolibarr and Nextcloud are using Apache 2.4.66 should we stop them until a new update is available?
-
-
@giofonseca I think the security report is about http2 which the apps do not use. Also, cloudron uses nginx in the frontend, and communicates with the apache of the apps via http (so we don't use http2 module).
@girish Thanks for the quick clarification, that is great news!
Hello! It looks like you're interested in this conversation, but you don't have an account yet.
Getting fed up of having to scroll through the same posts each visit? When you register for an account, you'll always come back to exactly where you were before, and choose to be notified of new replies (either via email, or push notification). You'll also be able to save bookmarks and upvote posts to show your appreciation to other community members.
With your input, this post could be even better 💗
Register Login